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Abstract 

Quasi-interpretations are a technique to guarantee complexity bounds on first-order func- 
tional programs: with termination orderings they give in particular a sufficient condition 
for a program to be executable in polynomial time (dl), called here the P-criterion. We 
study properties of the programs satisfying the P-criterion, in order to better understand its 
intensional expressive power. 

Given a program on binary lists, its blind abstraction is the non-deterministic program 
obtained by replacing lists by their lengths (natural numbers). A program is blindly poly- 
nomial if its blind abstraction terminates in polynomial time. We show that all programs 
satisfying a variant of the P-criterion are in fact blindly polynomial. Then we give two ex- 
tensions of the P-criterion: one by relaxing the termination ordering condition, and the other 
one (the bounded value property) giving a necessary and sufficient condition for a program 
to be polynomial time executable, with memoisation. 

1 Introduction 

Implicit computational complexity (ICC) explores machine-free characterizations of complex- 
ity classes, without referring to explicit resource bounds but instead by seeing these bounds as 
consequences of restrictions on program structures. It has been mainly developed in the func- 
tional programming paradigm, by taking advantage of ideas from primitive recursion (|131 12]). 
proof-theory and linear logic ([5]), rewriting systems or functional programming ([31 lll|). type 
systems (0). . . 

Usually ICC results include a soundness and a completeness statement: the first one says 
that all programs of a given language (or those satisfying a criterion) admit a certain complexity 
property and the latter one that all functions of the corresponding functional complexity class can 
be programmed in this language. For instance in the case of polynomial time complexity the first 
statement refers to a polynomial time evaluation of programs, whereas the second, which is of an 
extensional nature, refers to the class FP of functions computable in polynomial time. Theorems 
of this kind have been given for many systems, like for instance ramified recursion [2], variants of 
linear logic, fragments of functional languages. . . 

Expressivity. This line of work is motivating from a programming language perspective, 
because it suggests ways to control complexity properties of programs, which is a difficult issue 
because of its infmitistic nature. However, extensional correspondence with complexity classes 
is usually not enough: a programming language (or a static analysis methodology for it) offering 
guarantees in terms of program safety is plausible only if it captures enough interesting and natural 
algorithms. 

This issue has been pointed out by several authors (|14l l§|) and advances have been made in 
the direction of more liberal ICC systems: some examples are type systems for non- size-increasing 
computation and quasi-interpretations. However it is not always easy to measure the improvement 
a new ICC system brings up. Until now this has been usually illustrated by providing examples. 
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We think that to compare in a more appropriate way the algorithmic aspects of ICC systems 
and in particular to understand their limitations, specific methods should be developed. Indeed, 
what we need are sharp results on the intensional expressive power of existing systems and on the 
intrinsic limits of implicit complexity as a way to isolate large (but decidable) classes of programs 
with bounded complexity. For that we aim to establish properties (like necessary conditions) of 
the programs captured by an ICC system. 

Quasi-interpretations (QI) can be considered as a static analysis methodology to infer 
asymptotic resource bounds for first-order functional programs. Used with termination orderings 
they allow to define various criteria to guarantee either space or time complexity bounds (0E1 
QUI)- They present several advantages: the language for which they can be used is simple to 
use, and more importantly the class of programs captured by this approach is large compared to 
that caught by other ICC systems. Indeed, all primitive recursive programs from Bellantoni and 
Cook's function algebra can be easily proved to have a QI (|15|). One particularly interesting 
criterion, that we will call here the P-criterion, says that programs with certain QIs and recursive 
path orderings can be evaluated in polynomial time. 

In this paper, we focus our attention on QIs, proving a strong necessary condition for first-order 
functional programs on lists having a QI. More precisely, a program transformation called blind 
abstraction is presented. It consists in collapsing the constructors for lists to just one, modifying 
rewriting rules accordingly. This produces in general non-confluent programs, the efficiency of 
which can be evaluated by considering all possible evaluations of the program. 

In general, the blind abstraction of a polytime first-order functional program on binary lists is 
not itself polytime: blinding introduces many paths that are not available in the original program. 
However, we show that under certain assumptions, blinding a program satisfying the P-criterion 
with a (uniform) QI always produces a program which is polytime, independently from non- 
confluence. 

Outline. We first describe the syntax and operational semantics of programs (Section be- 
fore termination orderings and QIs (Section^ . Then blind abstractions are introduced (Section^J 
and we give the main property of the P-criterion w.r.t. blinding in sectional with application to 
safe recursion. Finally we define a generalization of the previous termination ordering and of QIs 
(bounded values property) which also guarantees the P-criterion (Section 0). 

2 Programs as Term Rewriting Systems 
2.1 Syntax and Semantics of Programs 

We consider first-order term rewriting systems (TRS) with disjoint sets X, T , C resp. of variables, 
function symbols and constructor symbols. 

Definition 1 (Syntax) The sets of terms and the equations are defined by: 

(values) T{C) 3v::=c | c(i>i,--- ,v n ) 
(terms) T(C, T, X) 3 t::=c j x | c(*i,-- - ,i„) 

I f(*l,-" .*n) 
(patterns) V 3 p::=c | x | c(pi, • • • ,p n ) 

(equations) D 3 d::=f{p±, ■ ■ ■ ,p n ) — > t 

where x G X , f G T , and c G C. We shall use a type writer font for function symbols and a bold 
face font for constructors. 

Definition 2 (Programs) A program is a tuple f — (X,C,J-,£) where £ is a set of T>- equations. 
Each variable in the right hand side (rhs) of an equation also appears in the Ihs of the same 
equation. The program has a main function symbol in T , which we shall also call f. 

The domain of the computed functions is the constructor algebra T(C). A substitution a is a 
mapping from variables to terms. We note 6 the set of constructor substitutions, i.e. substitutions 
a with range T(C). 
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Our programs are not necessarily deterministic, that is the TRS is not necessarily confluent. 
Non-confluent programs correspond to relations rather than functions. Notice that we could define 
a function by, e.g. , choosing the greatest possible result among all the executions [BJ. Since we 
only consider the complexity (that is the length of all executions), this is not important here. 

Firstly, we consider a call by value semantics which is displayed in Figure ^ The meaning 
of t J. v is that t evaluates to the constructor term v. A derivation will be called a reduction 
proof. The program f computes a relation [f] : T(C) n — ► T(C) defined by: for all Ui G T(C),v E 
Jf](ui, ■ • ■ , u n ) iff there is a derivation for f (u\, ■ ■ • , u n ) [ v. The size \ J\ of a judgement J = t [ v 
is the size \t\ of the lhs term. 



ceC UiVi 3j,tjiT{C) tilm f («!,-•• ,v n ) lv 

(Constructor) (Split) 



c(*l,-- - >*n) ic(«i,-- - ,V n ) f(tl,-- - l v 

f (pi, ■ ■ ■ ,p n ) — ► r G £ (T e 6 pier = Vi ralv 

(Function) 

f (ui, • ■ • , u„) 4 u 

Figure 1: Call by value semantics with respect to a program (X,C,J-,£) 

Definition 3 (Active rules) Passive semantics rules are Constructor and Split. The only active 
rule is Function. 

Let 7r : t I v be a reduction proof. If we have: 

e = g(9i 7 • ■ • j Qn) — > r a e & qia = Ui ra \ u 



s = g(wi, ••■ ,«„)|tl 

then we say that term s (resp. judgment J — s J, u) is active, e is the equation activated by s 
(resp. J) and ra (resp. ra j u) is the activation of s (resp. J). Other judgements (conclusions 
of (Split) or (Constructor) rules) are called passive. 

Notice that the set of active terms in a proof 7r is exactly the set of terms of the form 
f (vx, ■ ■ ■ ,v n ), where Vi are constructor terms, appearing in tt. Since the program may be non 
deterministic, the equation activated by a term s depends on the reduction and on the occurrence 
of s in 7r, and not only on s. 

Lemma 4 For each program, there exists a polynomial p : N — > N such that for any reduction proof 
7r, active term t in it and s the activation oft, \s\ — p{\t\). That is, the size of s is polynomially 
bounded by the size oft. 

Proof : Because there is only a finite set of equations in a program, each of them leading to at 
most a polynomial increase in size. □ 
A subderivation of a derivation proof is obtained by recursively taking a judgement and some of 
its premises. That is, it is a subgraph of the proof tree that is also a tree (but does not necessarily 
go down to the leaves of the proof). 

Definition 5 (Dependences) Let tt be a reduction proof and J = t J. v be a passive judgement 
appearing in it. A dependence of J is a subderivation of tt whose root is J and which contains 
only passive judgements. The maximum dependence Dj is the biggest dependence of a judgement, 
with respect to inclusion. 

The following is an example program that we will use throughout the paper (i £ {0, 1}): 

f(soSjx) — > append(f (six), f (six)) 

f (six) — » x 

f (nil) -» nil 

appendix, y) — * s,append(x, y) 
append(nil, y) -» y 
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Consider the derivation tt from Figure|21 Active judgements appearing in tt are f (soSinil) J, nil, 
f(sinil) J. nil and append(nil, nil) J. nil. Let J = append(f (sinil), f (sinil)) J, nil be a passive 
judgement. Its maximum dependence Dj is the subderivation containing J itself. 

nil I nil nil J. nil nil j nil 

f(s!nil) I nil f(sinil) J. nil append(nil, nil) J, nil 
append(f (sinil), f (sinil)) J, nil 
f (s sinil) I nil 

Figure 2: Example of reduction proof. 

Lemma 6 Let n be a reduction proof and J = t J. v be a judgement in it. 

1. For each judgement s J, u in a dependence of J , s is a subterm of t. 

2. The depth of any dependence of J is bounded by the depth oft. 

3. The number of judgements in a dependence of J is bounded by the size oft. 

Proof : We can either do a quick induction or look at the rules. 

1. Because passive rules only produce proper subterms or active terms. 

2. Because each passive rule decreases the depth of the term. 

3. It is the number of subterms of t. 

□ 

Proposition 7 For all programs, there exists a polynomial p : N — ► N such that for all derivations 
7r and all active judgement J in it with a passive activation H, \Djj\ < p(\J\)- That is, the size of 
Dh is polynomially bounded by the size of J and the polynomial is only dependent on the program. 

Proof : Obtained by combining the results of Lemmas 0] and □ 

Proposition 8 For all programs, there exists a polynomial p : N 2 — > N such that for all derivation 
proof n, if A is the number of active judgements in tt and S is the maximum size of an active 
judgement then \n\ < p(A,S). 

So, to bound the time of a derivation, it is sufficient to bound the number and size of active 
terms, passive terms playing no real role in it. 

Next, we also consider a call by value semantics with memoisation for confluent programs. 
The idea is to maintain a cache to avoid recomputing the same things several times. Each time 
a function call is performed, the semantics looks in the cache. If the same call has already been 
computed, then the result can be given immediately, else, we need to compute the corresponding 
value and store the result in the cache (for later reuse). The memoisation semantics is displayed 
on Figure The (Update) rule can only be triggered if the (Read) rule cannot, that is if there is 
no v such that (f , v%, ■ ■ ■ , v n , v) € C. 

Memoisation corresponds to an automation of the algorithmic technique of dynamic program- 
ming. 

The expression (C, t) JJ. (C, v) means that the computation of t is v, given a program f and an 
initial cache C. The final cache C contains C and each call which has been necessary to complete 
the computation. 

Definition 9 (Active rules) Constructor and Split are passive semantic rules. Update is an 
active rule. Read is a semi-active rule. 

Definition 10 (Active terms) Active terms and judgements, activated equations, activations 
and dependences are defined similarly as for the call by value case. Semi-active terms and judge- 
ments are similarly defined for semi-active rules. 
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ceC (Ci_i,ti) 4 




(Co,c(*i, • • ■ ,t n )) JJ, (C n ,c(wi,--- ,«„)) 
3j,tjiT(C) {d-uU) H {Ci,vi) (C n ,f( Vl ,--- ,v n ))H{C,v) 



(Split) 



(C,f(«i,-.-,v n )H<<7,«) 
f(pi,-- ■ ,Pn) -> r e £ ere 6 Pia = v t (C,rcr) J|(C» 




(C,f («!,-•• ,«„)> JJ. (C*'U(f,Wi,-- - ,« n ,«),«> 



(Update) 



Figure 3: Call-by-value interpreter with Cache of (X,C,J-,£). 



LemmaElstill holds, but we also need to bound the number of semi-active judgements to bound 
the size of a derivation. However, since they only lead to leaves in the derivation and the arity of 
the derivation tree is bounded (by k the maximum arity of a symbol in J-[JC), there is at most 
k times more (Read) rule than the total number of other rules. 

Proposition 11 Consider the memoisation semantics of Figure^ For all programs, there exists 
a polynomial P such that for all derivation proof n, if A is the number of active judgements in tt 
and S is the maximum size of an active judgement then \ir\ < P(A, S). 

Proof : Proposition still allows to bound the size of dependences, hence the number of passive 
judgements. Since semi-active judgements form a subset of the set of leaves in tt and since the 
number of premises of a rule is statically bounded (by fc, the maximum arity of a symbol), the num- 
ber of semi-active judgements is polynomially bounded by the number of non-leaves judgements 
in tt, hence by the number of active and passive judgements. □ 

Lemma 12 Let J\ = {C\,t) JJ. {C\,v} be a semi-active judgement in a proof tt : (0,f) JJ- (C,v), 
then there exists an active judgement Ji = (C2,t) JJ- {C' 2 ,v) in tt. 

Proof : Because the couple can only be in the cache if an active judgement put it there. □ 
The naive model where each rules takes unary time to be executed is not very realistic with 
the memoisation semantics. Indeed, each (Read) and (Update) rule needs to perform a lookup in 
the cache and this would take time proportional to the size of the cache (and the size of elements 
in it). However, the size of the final cache is exactly the number of (Update) rules in the proof 
(because only (Update) modify the cache) and the size of terms in the cache is bounded by the 
size of active terms (only active terms are stored in the cache) . So Proposition ^2 yields to a 
polynomial bound on the execution time. 

Memoisation cannot be used with non-confluent programs. Indeed, the same function call can 
lead to several different results. Several ideas could be used to define a memoisation semantics for 
non-confluent programs, but they all have their problems, hence we won't use any of them here 
and only use memoisation when the program is confluent. For sufficient conditions to decide if a 
program is confluent or not, refer, typically, to Huet's work ^U]. Here are, nevertheless, several 
different hints on how to design a memoisation semantics for non-confluent programs. 

— (No lookup) : The cache is never used and everything is recomputed every time. This is clearly 
not satisfactory since this is exactly the same thing as the cbv semantics. 

— (Cache first): If a function call is in the cache, use it. This is clearly not satisfactory because 
two identical calls will lead to the same result even if there was some non confluence involved. 

— (Random lookup): When performing a call, randomly choose between using a result in the 
cache and doing the computation. This is not satisfactory because we can choose to always 
recompute things, hence exactly mimicking the cbv semantics and the worst case will be the 
same (no time is gained). 

— (Random lookup with penalties): Same as random lookup, but after (re)computing a function 
call, check if is was already in the cache. If so, abort (because one should have looked for the 
result in the cache rather than recomputing it). This seems rather satisfactory but brings in 
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lots of problems for analysis. In particular, calls following different paths but leading to the 
same result will be identified even if they shouldn't. 



2.2 Call trees, call dags 

Following [3], we present now call-trees which are a tool that we shall use all along. Let f = 
{X, C, J- ', £ ) be a program. A call-tree gives a static view of an execution and captures all function 
calls. Hence, we can study dependencies between function calls without taking care of the extra 
details provided by the underlying rewriting relation. 

Definition 13 (States) A state is a tuple (f ,v±, ■ ■ ■ ,v n ) where f is a function symbol of arity n 
and vi, ■ ■ ■ ,v n are constructor terms. Assume that r\\ — (f , v\, • • • , v n ) and 772 = (g, u\, ■ ■ ■ , u m ) 
are two states. A transition is a triplet r\\ 772 such that: 

1. e is an equation f (pi, • • • ,p n ) — » t of £, 

2. there is a substitution a such that pia — Vi for all 1 < i < n, 

3. there is a subterm g(si, • ■ ■ , s m ) of t such that sia J. Ui for all 1 < i < m. 
is the reflexive transitive closure o/U ee £ 

Definition 14 (Call trees) Let tt : t J. v be a reduction proof. Its call trees is the set of tree 
obtained by only keeping active terms in tt. 

That is, if t is passive: 

beF\\C 7Tj : U I Vi 

— (C) or (S) 

b(h, ■ ■ ■ ,i„) I b(v lr ■■ ,v n ) 

Then 9^ = U07r«- 
If t is active: 

f(Pi>- • • ,Pn) -> r € £ o- e 6 PiO- = Vi p:ra[v 

(F) 

f (vi, ■ ■ ■ ,v n ) I V 

Then only contains the tree whose root is (f , v\, ■ ■ ■ , v n ) and children are Q p . 

When using the semantics with memoisation, the call-dag of a state is defined similarly to 
the call-tree, but using a directed acyclic graph instead of a tree, that is by adding links from 
(Read)-judgements to the corresponding (Update)-judgement. Notice that (Read)-judgement are 
always leaves of the proof so we do not loose any part of the proof by doing so. 

Definition 15 (Call dags) Let tt : (C, t) JJ. (C, v) be a reduction proof. Its call trees is the set of 
trees obtained by keeping only active terms and its call dag O v is obtained by keeping only active 
terms and replacing each semi-active term by a link to the corresponding (via Lemma U^ active 
term. 



Fact 1 (call tree arity) Let f be a program. There exists a fixed integer k, such that given a 
derivation tt of a term of the program, and a tree T of 0^, all nodes in T have at most k sons. 

Proof : For each rhs term r of an equation of / consider the number of maximal subterms of r 
with a function as head symbol; let then k be the maximum of these integers over the (finite) set 
of equations of /. □ 

Lemma 16 Let tt be a proof T be a call-tree (call-dag) in and consider two states rj = 
(f ,1)1, ■ ■ ■ , v n ) and rj' — (g, m, • • • , u m ) such that rj' is a child of rj. Let t = f (v\, ■ ■ ■ , v n ) be the 
active term corresponding to rj and s = g(ui, • • • ,u m ) be the active term corresponding to rj' . Let 
e be the equation activated by t in tt. Then, T) rf . 

Conversely, if rj ~~» rj' and e is activated by t then rj' is a child of rj in T . 
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Proof : Condition 1 and 2 correspond to the application of the active rule. Condition 3 correspond 
to the application of several passive rules to get ride of the context and evaluate the parameters 
of g. □ 

This means that our definition of call trees is equivalent to the one in [3]. However, we need 
an alternate definition in order to deal with non determinism. 

Call trees and call dags are a tool to easily count the number of active judgements in a 
derivation. So, now, in order to apply Propositions IHI or II II we need to (i) bound the size (number 
of nodes) in the call tree or call dag and (ii) bound the size of the states appearing in the call tree 
(dag). 

3 Ordering, Quasi-Interpretations 

3.1 Termination Orderings 

Definition 17 (Precedence) Let f = (X,C,J-,£) be a program. A precedence -<jr is a partial 
ordering over F{JC . We note fUjr the associated equivalence relation. A precedence is compatible 
with f if for each equation f (pi, • • ■ ,p n ) r and each symbol b appearing in r, b ^(jr f . It is 
separating if for each c G C,f G T, c f (that is constructors are the smallest elements of 
-<r while functions are the biggest). It is fair is for each constructors c, c' with the same arity, 
c c' and it is strict if for each constructors c, c' , c and c' are incomparable. 

Any strict precedence can be canonically extended into a fair precedence. 

Definition 18 (Product extension) Let -< be an ordering over a set S. Its product extension 
is an ordering -< p over tuples of elements of S such that (mi, • • • , TO&) ~< p (ri\, • • • , n&) if and only 
if (i) yi,nii ^ ni and (ii) 3j such that m,j -< rij. 

Definition 19 (PPO) Given a separating precedence the recursive path ordering -< rpo is 
defined in Figure^ 

If <r is strict (resp. fair) and separating, then the ordering is the Product Path Ordering 
PPO (resp. the extended Product Path Ordering EPPO). 

Of course, it is possible to consider other extensions of orderings. Usual choices are the lexi- 
cographic extension, thus leading to Lexicographic Path Ordering or Multiset extension, leading 
to Multiset path Ordering. It is also possible to add a notion of status to function ^2] indicating 
with which extension the parameters must be compared. This leads to the more general Recursive 
Path Ordering (RPO). However, here we only use the (extended) Product Path Ordering so we 
don't describe others. 

S = ti Or S -<rpok f ^ j:\JC ^ i s i ^-rpoi{tl,- ■ ■ ,tn) g <F f f e J-\jQ 
S -<rpo f (• • • ,ti, ■ ••) g(si, ■ ■ ■ ,S m ) -< rpo f • • • ,t n ) 

(Si , ■ • ■ ,S n ) < P rpo (ti, • • • , t n ) f «jr g V« Si ^ rpo f (ti, • • ■ ,t n ) 

Sv^l ? ;^n) ~^rpo f (^1 ? * > ^n) 

Figure 4: Definition of < rpo 

An equation I — > r is decreasing if we have r ~< rpo I- A program is ordered by -< rpo if there is 
a separating precedence on J- such that each equation is decreasing. Recall that -< rpo guarantees 
termination ([7]). 

Notice that in our case, since patterns cannot contain function symbols, if there is a precedence 
such that the program is ordered by the corresponding < rpol then there is also a compatible one 
with the same condition. 
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Lemma 20 Let f be a program and -<y? be a separating precedence compatible with it. Let i] = 
(f ,v±, ■ ■ ■ ,v n ) be a state in a call tree (resp. dag) T and r}' = (g, Ui, • • • , u m ) be a descendant of 
7] in T. Then g <f f 



Proposition 21 (Computing by rank) Let f be a program and -<jr be a separating precedence 
compatible with it. Let T be a call tree (resp. dag) and n = (f • • • ,v n ) be a node in it. Let A 
be the maximum number of descendants of a node with the same arity: 



The size of T is polynomially bounded by A. 

Proof : Let f be a function symbol. Its rank is rk(f ) = max g ^ jf r k(g) + 1. 

Let d be the maximum number of function symbols in a rhs of f and k be the maximum rank. 
We will prove by induction that there are at most Bi = J2i<j<k ^ x A k ~i +1 nodes in T at rank 
i. 

The root has rank k. Hence, there are at most A = d k ~ k A k ~ k+1 = Bk nodes at rank k. 

Suppose that the hypothesis is true for all ranks j > i. Each node has at most d children. 
Hence, there are at most d^j^Bj nodes at rank i whose parent has rank ^ i. Each of these 
nodes has at most A descendants at rank i, hence there are at most dx Ax Ylj>i Bj < Bi nodes 
at rank i. 

Since Bi < (k — i + 1) x d k A k+1 , Bi is polynomially bounded in A and so is the size of the 
call tree (dag). □ 

Thus to bound the number of active rules in a derivation (hence bound the derivation's size 
by Prop. l%lor lll|l it suffices to establish the bound rank by rank. 

Proposition 22 Let f be a program terminating by PPO, T be a call dag and r\ — (f , vi, ■ ■ ■ ,v n ) 
be a node in T. The number of descendants of n in T with the same rank as r\ is polynomially 
bounded by \r]\. 

Proof : Because of the termination ordering, if rj' = (g, u±, ■ ■ ■ ,u m ) is a descendant of r\ with 
f «jf g, then u- L is a subterm of Vi. There are at most \vi\ such subterms and thus ell ( | z^i | + 1) 
possible nodes (where c is the number of functions with the same precedence as f ). □ 
This is point (2) in the proof of Lemma 51 in 0. Notice that it only works on a call dag, 
because identical nodes are identified, and not on a call tree. 

3.2 Quasi-interpretations 

We restrict ourselves to additive QIs as defined in 3 . 

Definition 23 (Assignment) An assignment of a symbol b E T[\C whose arity is n is a func- 
tion fl&D : (K)™ -> K such that: 

(Subterm) ^{X u ■ ■ ■ ,X n ) > X { for all 1 <i<n. 

(Weak Monotonicity) (|&D is increasing (not strictly) wrt each variable. 
(Additivity) <\c\)(X u ■ • • , X n ) > £?=i 1,+ai/ceC (where a>l). 
(Polynomial) (\b\j is bounded by a polynomial. 



Proof : Because the precedence is compatible with f . 



□ 



A = max^ = ( f>Vl) ... , Vn )eT #W = (g, "i, • • • , 
rj is an ancestor of rj' and g «jf f } 
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We extend assignments <\.\j to terms canonically. Given a term t with n variables, the assignment 
d^D is a function (R)" — > R defined by the rules: 

W = x 

Given two functions / : (R) n — > R and g : (R)™ 1 — > R such that n > m, we say that f > g i& 
MX 1 , ...,X n : f(X 1 , . . .,X n ) > g{X x , . . . ,X m ). 

There are some well-known and useful consequences of such definitions. We have fls[) > if i 
is a subterm of s. Then, for every substitution a, <\s§ > implies that (\sa\) > i\ta\). 

Definition 24 (Quasi-interpretation) A program assignment (\.\) is an assignment of each pro- 
gram symbol. An assignment (\.\) of a program is a quasi-interpretation ( QI) if for each equation 

W > H- 

In the following, unless explicitly specified, (\.\) will always denote a QI and not an assignment. 
Lemma 25 Let v be a constructor term, \v\ < (\v\) < a\v\ for a constant a. 

Proof : By induction, the constant a depends on the constants in the QI of constructors. □ 

Lemma 26 Assume f has a QI. Let rj = (f,ui,-- - ,v n ) and r/' = (g, iti,-- - ,u m ) be two states 
such that r) A n'. Then, flg(ui, • • • , u m )P < (|f • • • ,"«)!)■ 

Proof : Because g(ui, • • • , u m ) is a subterm of a term obtained by reduction from f(v±, • • • , v n ). 

□ 

Corollary 27 Let f be a program admitting a QI and 7r : (C,t = f («!,••• ,w n )) JJ- (C" ,u) 6e a 
derivation. The size of any active term in n is bounded by P(\vi\) for a given polynomial P. 

Proof : The size of an active term s = g(wi, • • ■ , u m ) is bounded by mmax \m\ < m(|s[). By the 
previous Lemma, (js|) < <\t\). But by polynomiality of QIs, (\t\) < Q{<\vi\f). Since Vi are constructor 
terms, d^D < a\vi\ □ 
Now, if we combine this bound on the size of active terms together with the bound on the 
number of active terms of Proposition l22l we can apply Proposition !! H and conclude that programs 
terminating by PPO and admitting a QI are Ptime computable. Actually, the converse is also 
true: 

Theorem 28 (P-criterion, (|3j)) The set of functions computable by programs that (i) termi- 
nate by PPO and (ii) admit a QI, is exactly Ptime. 

In order to achieve the polynomial bound, it is necessary to use the cbv semantics with mem- 
oisation. 

4 Blind Abstractions of Programs 
4.1 Definitions 

Our idea is to associate to a given program f an abstract program f obtained by forgetting each 
piece of data and replacing it by its size as a unary integer. In this way, even if f is deterministic, 
the associated f will in general not be deterministic. 
For that we first define a target language: 

— variables: X — X, 

— function symbols: J 7 = {f,f G J 7 }, 

— constructor symbols: C — {s,0} where s (resp. 0) has arity 1 (resp. 0). 
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f(SoSiX) 


-» append(f (six), f (six)) 


f (ssx) 


-» append(f (sx), f (sx)) 


f(six) 




f(sx) 


-> X 


f(nil) 


-> nil 


1(0) 


-> 


appendix, y) 


-> s. ( append(x, y) 


append(sx, y) 


-» s append(x, y) 


append(nil, y) 


-» y 


append(0, y) 


-» 2/ 



Figure 5: Blind abstraction of our running example 



This language defines a set of constructor terms T(C), a set of terms T(C, T, X) and a set of 
patterns V. 

The blinding map is the natural map B : T(C,!F, X) — ► T(C,J-, X) obtained by replacing 
constructors of arity 1 with s, and those of arity by 0. It induces similar maps on constructor 
terms and patterns. We will write t (resp. p) for B(t) (resp. B(p)). 

The blinding map extends to equations in the expected way: given a equation d = p — » t of the 
language [X^T 1 C), we set d = B(d) = J> — ► t. Finally, given a program f = (X,C,J-,£), its blind 
image is f = (X, C, £) where the equations are obtained by: £ = {d, d G £}. Observe that even 
if f is an orthogonal program, this will not necessarily be the case of f , because some patterns are 
identified by B. 

The denotational semantics of f can be seen as a relation over the domain of tally integers. 

4.2 Complexity Definitions 

Definition 29 (Strongly polynomial) We say a non- deterministic program f (of arity n) is 
strongly polynomial if there exists a polynomial p : N — » N such that for every sequence Vi, ■ ■ ■ ,v n 
and any ir : f • ■ • , V n ) J, u, it holds that \tt\ < pQ2 i=1 \vi\)- 

Of course similar definitions would also make sense for other complexity bounds than polynomial. 
In the case of a deterministic program, this definition coincides with that of a polynomial time 
program (in the model where rewriting steps are counted as unit step). 

Definition 30 (Blindly polynomial) A program f is blindly polynomial if its blind abstraction 
f is strongly polynomial. 

Observe that: 

Fact 2 If a program f is blindly polynomial, then it is polynomial time (with the call-by-value 
semantics). 

Indeed, it is sufficient to observe that any reduction sequence of f can be mapped by B to a 
reduction sequence of f . The converse property is not true. Observe for that our running example 
in Figure note that f terminates in polynomial time but this is not the case for f . Indeed if we 
denote n — 0j we have that f (n) can be reduced in an exponential number of steps, with a 

it : f(n) i 2» " 

Note that the property of being blindly polynomial is indeed a strong condition, because it 
means in some sense that the program will terminate with a polynomial bound for reasons which 
are indifferent to the actual content of the input but only depend on its size. 

Now we want to discuss the behavior of the blinding map with respect to criteria on TRS based 
on recursive path orderings (RPO) and QIs ( 3 ). 

4.3 Blinding and Recursive Path Orderings 

Lemma 31 Let f be a program: if f terminates by PPO then f terminates by PPO. 
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Indeed T and T are in one-one correspondence, and it is easy to observe that: if is a 
precedence which gives a PPO ordering for f , then the corresponding does the same for f . 

The converse is not true, see for example Figure |S] where the first equation does terminate by 
PPO on the blind side but not on the non-blind side. However, we have: 

Proposition 32 Let f be a program. The three following statements are equivalent: (i) f termi- 
nates by EPPO, (ii) f terminates by EPPO, (Hi) f terminates by PPO. 

Proof : Just observe that on T(C, T, X), PPO and EPPO coincide, and that t -<eppo t' implies 

t <EPPO t'. □ 

4.4 Blinding and Quasi-interpretations 

Assume the program f admits a quasi- interpretation fl.[). Then in general this does not imply that f 
admits a quasi- interpretation. Indeed one reason why (j.|) cannot be simply converted into a quasi- 
interpretation for f is because a quasi-interpretation might in general give different assignments 
to several constructors of the same arity, for instance when (jsoD(A) = X + 1 and (|siD(A) = X + 2. 
Then when considering f there is no natural choice for (Js[) . 

However, in most examples in practice, a restricted class of quasi-interpretations is used: 

Definition 33 (Uniform assignments) An assignment for f = (X,C,J-,£) is uniform if all 
constructors of same arity have the same assignment: for each c, c' G C, arity{c) = arity(c') 
implies (jc[) = (c'[). A quasi-interpretation off is uniform if it is defined by a uniform assignment. 

Now we have: 

Proposition 34 The program f admits a uniform quasi-interpretation iff f admits a quasi- 
interpretation. 

5 Linear Programs and Call-by- Value Evaluation 

Now we want to use the blinding transformation to examine properties of programs satisfying the 
P-criterion (Theorem I28|l . 

5.1 Definitions and Main Property 

Definition 35 (Linearity) Let f be a program terminating by a RPO and g be a function symbol 
in i. We say g is linear in f if, in the rhs term of any equation for g, there is at most one 
occurrence of a function symbol h with same precedence as g. The program f is linear if all its 
function symbols are linear. 

Theorem 36 Let f be a (possibly non deterministic) program which i) terminates by PPO, ii) 
admits a quasi-interpretation, Hi) is linear. Then f is strongly polynomial. 

Note that the differences with the P-criterion Theorem from Pj (Theorem 1280 are that: the 
program here needs not be deterministic, but linearity is assumed for all function symbols. As 
a result the bound holds not only for the memoisation semantics, but for the plain call-by-value 
semantics (and for all execution sequences). Observe that linearity is here a sufficient condition 
to avoid the use of memoisation, which is problematic with non-determinism (see the end of 
Section [2.1(1 . As blinding produces non-deterministic programs we thus consider blinding of linear 
programs. 

Proof : The quasi-interpretation provides a bound on the size of active judgements via Corol- 
lary |23 Linearity of the program ensures that the set of descendants of T) = (f , v\, ■ ■ ■ , jj„) in a call 
tree with the same precedence as f is a branch, that is has size bounded by its depth. Termination 
by PPO ensure that if rj' — (g, u±, ■ ■ ■ ,u m ) is the child of 77 with f g then |ttj| < and 
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there is at least one j such that \uj\ < \vj\. So, the number of descendants of rj with the same 
precedence is bounded by ^ \vi\. This bounds the number of active judgements by rank. 

So we can now use Propositions 1211 and |S] and conclude that the size (number of rules) of any 
derivation n : t j v is polynomially bounded by \t\. □ 

Proposition 37 Let f be a (possibly non deterministic) program which i) terminates by PPO, ii) 
admits a uniform quasi-interpretation, Hi) is linear. Then f is blindly polynomial. 

Proof : Note that: 

— f terminates by PPO, so f also, by Lemma mi 

— the quasi-interpretation for f is uniform, so f admits a quasi-interpretation, by Prop. 1341 

— f is linear, so f is also linear. 

So by Theorem 1361 we deduce that f is strongly polynomial. Therefore f is blindly polynomial. □ 
5.2 Bellantoni-Cook Programs 

Let BC the class of Bellantoni-Cook programs, as defined in [2] written in a Term Rewriting System 
framework as in |15j . Function arguments are separated into either safe or normal arguments, 
recurrences can only occur over normal arguments and their result can only be used in a safe 
position. We use here a semi-colon to distinguish between normal (on the left) and safe (on the 
right) parameters. 

Definition 38 (Bellantoni-Cook programs) The class BC is the smallest class of programs 
containing: 

— ( Constant) 

— (Successors) Si(x),i G {0,1} 
initial functions: 

— (Projection) 7r"' m (a;i, ■ • ■ , x n ;x n+ x, ■ ■ ■ , x n+m ) -> Xj 

— (Predecessor) p(;0) — > p(; Si(x)) — > x 

— (Conditional) C(;0, x,y) — * x C(; sq, x, y) — > x C(; Si , x, y) — ► y 
and is closed by: 

— (Safe recursion) 

f(0,ari,-- - ,x n ;y x ,--- ,y m ) ->g(xi,--' ,x n ;yi,--- ,y m ) 
£(si(z),xi, ■■■ ,x n ;yi, ■ ■ ■ ,y m ) -+hi(z,Xi, ■■■ ,x n ;yi,--- ,y m , 

f (z,xi, ■ ■ ■ ,x n \y\,-" ,y m )),i € {0, 1} 

with g, hj G BC (previously defined) ; 

— (Safe composition) 

f(x\, ■■■ ,x n ;yx,--- ,y m ) -> g(hi(xi, ■ • ■ ,x n ), . . .,hp(xt, ■ ■ ■ ,x n ); 

ll(^l)' - ' > -"rj? J/l> ' ' ' j Vm)i ■ • ■ > lgO^l) ' • ' ; X n ; y\ , • • • , ?/ m )) 

with g, h,;, lj G BC ; 

It is easy to see that any BC program terminates by PPO and is linear. 

Definition 39 (Quasi-interpretations for BC-programs) A BC-program admits the follow- 
ing quasi-interpretation: 

— M = i ; 

— <\s$(X)=X + l ; 

— fl7rD(-X"i, • • • , X n+m ) = maxpfi, • • • , X n+m ) : 

— \ V \(X)=X; 

— (C|)(X,y,Z) = max(X,y,Z) ; 
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For functions defined by safe recursion of composition, (\f\)(Xi, ■ ■ ■ , X n ;Yi, ■•■ ,Y m ) — q±(Xi, ■ ■ ■ ,X,, 
max(Yi, • • ■ . Y m ) with q t defined as follows: 

- q f (A,X lr -' ,X n )=A(q h0 (A,X lr -' , X n ) + q hl (A, X±, ■ ■ ■ , X n )) + q g (X u ■ ■ ■ ,X n ) iff is de- 
fined by safe recursion ; 

- q±{Xi,--- ,X n ) = q g (q hl (X 1; --' , X n ), . . . , q hp {X x , ■ ■ ■ ,X n )) + ^ qx t (Xi, • • • ,X n ) iff is de- 
fined by safe composition. 

Theorem 40 If f is a program of BC, then f is blindly polynomial. 

Proof : It is sufficient to observe that if / is a BC program, then it is linear and terminates 
by PPO, and the quasi-interpretation given above is uniform. Therefore by Proposition 1371 / is 
blindly polynomial. □ 

6 Semi- lattices of Quasi-Interpretations 

The study of necessary conditions on programs satisfying the P-criterion has drawn our atten- 
tion to uniform quasi-interpretations. This suggests to consider quasi-interpretations with fixed 
assignments for constructors and to examine their properties as a class. 

Definition 41 (Compatible assignments) Let f be a program and <\.\)i, <\.\)2 be two assignments 
for f. We say that they are compatible if for any constructor symbol c we have: 

Hi = Ha- 

. A family of assignments for f is compatible if its elements are pairwise compatible. We use these 
same definitions for quasi-interpretations. 

Each choice of assignments for constructors thus defines a maximal compatible family of quasi- 
interpretations for a program f : all quasi-interpretations for f which take these values on C. 
We consider on assignments the extensional order <: 

ih < Ik iff 
V/eCuJ,Vie (R+) k , (/Mi) < <\fh(x). 

Given two compatible assignments fl.[)i, <\.\)2 we denote by (j.|)i A (\.\)2 the assignment (j.|)o defined 

by: 

v/ef.i/|o - Q/Di Ad/Da 

where a A (3 denotes the greatest lower bound of {a, /?} in the pointwise order. Then we have: 

Proposition 42 Let f be a program and (|.Di, d-|)2 be two quasi-interpretations for it, then (].[) i A (J.|)2 
is also a quasi-interpretation for f . 

To establish this Proposition we need intermediary Lemmas. We continue to denote (|.[)o = 
WiAWa: 

Lemma 43 For any f of J- we have that (|/Do is monotone and satisfies the subterm property. 

Proof : To prove monotonicity, assume x < y, for the product ordering. Then, for i = 1 or 2: 
fl/Do@) = lfh(x) A <\fh{x) < (|/Di(f) < (ifW), using monotonicity of fl^. As this is true for 
i = 1 and 2 we thus have: <\f\)o(x) < d/Di(y) A fl/Da(j7) = d/Do(j7)- It is also easy to check that <\f\) 
satisfies the subterm property. □ 

Lemma 44 Let t be a term. We have: (]^o < d^Di; f or i = 1,2. 
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Proof : By induction on t, using the definition of d/Do and (|c[)o , and the monotonicity property 
of Lemma 021 D 

Lemma 45 Let g(pi, • ■ ■ ,p n ) — » t be an equation of the program f. We have: 

y °(Mo,...,Mo) > Wo. 

Proof : As patterns only contain constructor and variable symbols, and by definition of if p 
is a pattern we have: <\p\jo = Wi = (bN- Let i = 1 or 2; we have: 

d5Di(dpiD*(^)i • • • j WU(aO) > d^Di(^) because is a quasi-interpretation, 

> d^Do(^) with Lemma |4H 

So: 

<|<?Di«Mo(s), • • • , (Mo(2)) > Wo(2), as dpji = dpjDo. 

Write y = (Mo(£), • • • , (Mo(a))- As ^i(^) > d*Do(z) and <\g\) 2 (y) > <\t\, (x), by definition of 
flsDo we get dffDo(y) > <\t\) {x), which ends the proof. □ 

Now we can proceed with the proof of Prop. 021 
Proof : [ Proof of Prop. 021 Observe that Lemma 14*31 ensures that <\.\)o satisfies the monotonicity 
and the subterm conditions, and Lemma 1451 that it satisfies the condition w.r.t. the equations of 
the program. The conditions for the constructors are also satisfied by definition. Therefore (|.[)o is 
a quasi-interpretation. □ 

Proposition 46 Let f be a program and Q be a family of compatible quasi-interpretations for 
f, then Aoggfl-D * s a quasi-interpretation for f . Therefore maximal compatible families of quasi- 
interpretations for f have an inferior semi-lattice structure for <. 

Proof : It is sufficient to generalize Lemmas 1431 and l4*5l to the case of an arbitrary family Q and 
to apply the same argument as for the proof of Prop. 021 D 



7 Extending the P-criterion 

Blind abstraction suggest to consider not only the PPO ordering from the P-criterion, but also 
an extension which is invariant by the blinding map, the EPPO ordering (see Subsection 14. 3JI . It 
is thus natural to ask whether EPPO enjoys the same property as PPO. We prove in this section 
that with EPPO we can still bound the size of the call-dag and thus generalize the P-criterion. 
Then, we will also consider the bounded value property which is an extension of the notion of QI. 
Here, we bound the number of nodes in the call-dag with a given precedence. Then, Prop. 1211 
bounds the total number of nodes in the call-dag. 

Fact 3 Since we're working over words (unary constructors), patterns are either constructors 
terms (that is, words), or have the form p = Si(s2 . . . s n (x) . . .). Ln the second case, we will write 
p = f2(x) with 51 = S1S2 . . . s„. 

The length of a pattern is the length of the corresponding word: \p\ = |fi| 

Proposition 47 In a program terminating by PPO or EPPO, the only calls at the same precedence 
that can occur are of the form 

f(pi,-' - ,Pn) -> C[gi(ql,--- ,g£j,...,g p (tj?,-- - ,qf)\ 

where C[.] is some context, f «jf g fc andpi,q^ are patterns. Moreover, each variable appearing in 
a q\ appears in pi . 
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Proof : This is a direct consequence of the termination ordering. □ 
Since we will only consider individual calls, we will put in the context all but one of the g^: 
f(Pi,-- - ,Pn) -»■ C[g(qi, • • • ,q m )] 

Definition 48 (Production size) Let f be a program terminating by EPPO. Lett {pi, ■ ■ ■ ,p n ) — > 
C[g(<7i, • • • , q m )\ be a call in it where f k,^ g. The production size of this call is maxj{|gj|}. The 
production size of an equation is the greatest production size of any call ( at the same precedence ) 
in it. That is if we have an equation e — f(pi, ■ ■ ■ ,p n ) —> C[gi{ql, ■ ■ ■ , ?„J, • • • , g P (<7i, ■ ■ ■ >?f)] 
where f «jr g fe then its production size is K e — max \q*\ The production size of a function symbol 
is the maximum production size of any equation defining a function with the same precedence: 

Kh = niaXg~^-h max e=g(...)^r Ke 

Definition 49 (Normality) Let f be a program. A function symbol h in it is normal if the 
patterns in the definitions of functions with the same precedence are bigger than its production 
size: 

Vg K,r h, Vg(<7i, • • • ,q m ) ^ r e £, \qi\ > K h 
Let f be a program. It is normal if all function symbols in it are normal. 

This means that during recursive calls, every constructor produced at a given moment will be 
consumed by the following pattern matching. 

Lemma 50 A EPPO-program can be normalised with an exponential growth in the size of the 
program. 

The exponential is in the difference between the size of the biggest production and the size of 
the smallest pattern (with respect to each precedence). 

Proof : [Sketch] The idea is to extend the small pattern matchings so that their length reaches 
the length of the biggest production. This is illustrated by the following example: 

f(si(si(si(x)))) -» f(s (s (x))) 
f(so(a;)) -» f(x) 

In this case, the biggest production has size 2 but the shortest pattern matching has only size 1. 
We can normalise the program as follows: 

f(si(si(si(x)))) -» f(so(s (x))) 
f(s (s (x))) -> f(s (x)) 
f(so(si(z))) -» f(si(x)) 

Even if the process does extend productions as well as patterns, it does terminate because only 
the smallest patterns, hence the smallest productions (due to termination ordering) are extended 
this way. □ 

Notice that the exponential growth is indeed in the initial size of the program and does not 
depend on the size of any input. Since the size of the call-dag is bounded by the size of the inputs, 
this docs not hamper the polynomial bound. The normalization process preserves termination by 
PPO and EPPO, semantics and does not decrease time complexity. Hence, bounding the time 
complexity of the normalized program is sufficient to bound the time complexity of the initial 
program. In the following, we only consider normal programs. 

Let f be a program and g be a function, we will enumerate all the symbol of same precedence 
as g in the rhs of f and label them g 1 , . . . ,g". This is simply an enumeration, not a renaming 
of the symbols and if a given symbol appears several times (in several equations or in the same 
one), it will be given several labels (one for each occurrence) with this enumeration. Now, a path 
in the call-dag staying only at the same precedence as g is canonically identified by a word over 
{g 1 , . . . ,g™}. We write rj ^> r( to denote that rj is an ancestor of r( and ui is the path between 
them. 
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Lemma 51 Let r\\ = (f , v\, ■ ■ ■ , v n ) and rj 2 = (g, iti, ■ • • , u m ) be two states such that r\\ ~~> r\i and 
both function symbols have the same precedence. Then \vt\ > \ui\ for all i and there exists j such 
that \vj \ > \uj\. 

Proof : This is a consequence of the termination proof by EPPO. □ 

Corollary 52 Let 77 = (f,Vi, ■ ■ ■ ,v n ) be a state. Any branch in the call-dag starting from rj has 
at most n x (max|uj|) nodes with the same precedence as f . 

Lemma 53 Suppose that we have labels a, (3 and 7 and nodes such that rj A 771 7^ ~^ Vi an d 

P a I 1 II rrii II II 

v^m^V2^V2- Then Vi =v 2 - 

Proof : Since labels are unique, the function symbols in 77" and r( 2 ' are the same. It is sufficient to 
show that the ith components are the same and apply the same argument for the other parameters. 

Let q, v, v' , v" , u, u' , u" be the ith parameters of 77, 771, 77J, 77", 772, r] 2 , r] 2 ' respectively. Since we're 
working on words, an equation e has, with respect to the ith parameter, the form: 

f(...,n e (a;),...)-C[g(...,nUx),...)] 

and normalization implies that \W e \ < \ fi e \ (previous lemma). 
So, in our case, we have: 

q = n a ( x ) ^ n'jx) = v = n p ( x ') ^ n' fj (x') 
= v' = n 7 (x") -» n'^x") = v" 

q = n f3 (y)^n' f3 (y) = u = n a (y')^n' a (y') 
= u' = 7 (y") - n;(y") = u" 

Because of normalization, > \€t' a \. Hence x' is a suffix of x, itself a suffix of q. Similarly, 
x" and y" are suffixes of q. 

Since they're both suffixes of the same word, it is sufficient to show that they have the same 
length in order to show that they are identical. 

\x\ = \q\ - \(l a \ 

\ X '\ = \ v \ - 1^| = M-|n Q | + \tf a \ -m 

\x"\ = |g|-|n a | + |^|-|0 /3 | + |0^|-|0 7 | 

\ y "\ = |g|-|n /J | + |n^|-|fi a | + |n' a |-|n 7 | 

So x" = y" and thus v" = u" . □ 

Corollary 54 Let u)\ , uj 2 be words and a be a label such that: r\ ^> 771 7^ and r\ % 772 rj 2 ■ If 
ui\ and Ll>2 have the same commutative image, then ?][ = i]' 2 . 

Proof : This is a generalization of the previous proof, not an induction on it. If uj\ = a\ . . . a n 
then the size in the last node is: 

|x'i = m-Ei^i+Ei°U-ki 

which is only dependent on the commutative image of u>i. □ 
So, when using the semantics with mcmoisation, the number of nodes (at a given precedence) 
in the call-dag is roughly equal to the number of paths modulo commutativity. So any path can be 
associated with the vector whose components are the number of occurrences of the corresponding 
label in it. 

Proposition 55 Let T be a call-dag and r\ = (f , Vi, ■ ■ ■ , v n ) be a node in it. Let I = nx (max \vj ) 
and M be the number of functions with the same precedence as f . The number of descendants of 
77 in T with the same precedence as f is bounded by (I + 1) M , that is a polynomial in \r]\. 
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Proof : Any descendant of rj with the same precedence can be identified with a word over 
{f 1 , . . . , f M }. By Corollarvl52lwe know that these words have length at most / and by Corollarvl54l 
we know that it is sufficient to consider these words modulo commutativity. 

Modulo commutativity, words can be identified to vectors with as many components as the 
number of letters in the alphabet and whose sum of components is equal to the length of the word. 

Let Df be the number of elements from N™ whose sum is i. This is the number of words of 
length i over a n-ary alphabet modulo commutativity. 

Clearly, D"_ 1 < D™ (take all the n-uple whose sum is i — 1, add 1 to the first component, you 
obtain D™_ 1 different n-uple whose sum of components is i). 

Now, to count D™, proceed as follows: Choose a value j for the first component, then you have 
to find n — 1 components whose sum is i — j , there are -D™" 1 such elements. 

A" = D i-o } = J2 B T X < (« + 1) X D ?~ X <(i + i)"" 1 x D i < (* + 1)" 

0<j<i 0<j<i 

□ 

Definition 56 (Bounded Values) A program f = (X ,0,^,6) has polynomially bounded values 
iff for every function symbol g G T , there is a polynomial p s : N — > N such that for every state T]' 
appearing in a call tree for rj = (g, v%, . . . ,v n ), \rf\ < P s (\t]\). 

Theorem 57 The set of functions computed by programs terminating by EPPO and having poly- 
nomially bounded values is exactly Ptime. 

Proof : Proposition 1551 bounds the size of the call dag by rank. Bounded value property bounds 
the size of nodes in the call dag. So we can apply Proposition !! ll to bound the size of any derivation. 
The converse is obtained from the P-criterion. □ 

Theorem 58 Let f be a deterministic program terminating by EPPO. Then the following two 
conditions are equivalent: 

1. f has polynomially bounded values; 

2. f is polytime in the call-by-value semantics with memoisation. 

Proof : The implication HI ^Ol is proved as follows: Termination by EPPO provides a polynomial 
bound on the size of the call-dag (by rank) via Proposition 1551 and the bounded values property 
provides a polynomial bound on the size of nodes in the call dag. Hence we can apply Propo- 
sition ^3 and bound the size of any derivation tt : ($,t) JJ- (C, v) by P(|t|) for some polynomial 
P. 

For the converse, it is sufficient to see that a state appearing in the call dag also appear in the 
final cache. Since the size of any term in the cache is bounded by the size of the proof (because we 
need to perform as many (Constructor) rules as needed to construct the term), it is polynomially 
bounded because the program is polytime. □ 



8 Conclusions 

In this paper, blind abstractions of first-order functional programs have been introduced and 
exploited in understanding the intensional expressive power of quasi-interpretations. In particular, 
being blindly polytime has been proved to be a necessary condition in presence of linear programs, 
product path-orderings and uniform quasi-interpretations. This study has lead us to some other 
interesting results about the lattice-structure of uniform quasi-interpretations and the possibility 
of extending product path-orderings preserving polytime soundness. 

Further work includes investigations on conditions characterizing the class of programs (or 
proofs) captured by quasi-interpretation. In particular, it is still open whether being blindly 
polytime is a necessary and sufficient conditions for a program to have a quasi-interpretation 
(provided some sort of path-ordering for it exists). 
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